Provider-Specific Terms

Effective date: October 5, 2026.

1. Provider identity

These Provider-Specific Terms are offered by Four Leafs Technology, LLC ("Provider"), a limited liability company formed in the State of Idaho, with a notice address of 2545 Alderwood Ave, Twin Falls, ID 83301 and a legal-notices contact of [email protected].

2. Governing law and jurisdiction

These terms, and the standard Cloud Terms they attach to, are governed by the laws of the State of Idaho, without regard to conflict-of-law principles. Any dispute not otherwise resolved under the Cloud Terms' own dispute-resolution provisions will be brought in the courts located there.

3. The Application

"Application" means the Certia Atlassian Forge app, which provides access-review and certification-campaign functionality for Jira and, where enabled, Confluence, to help customers document periodic access reviews consistent with SOC 2 (CC6.1–CC6.3) and ISO 27001 access-control requirements.

The Application produces evidence that an access review was performed. It does not, by itself, make a customer SOC 2 or ISO 27001 compliant or certified.

4. Data Processing Agreement

Provider's Data Processing Agreement, available at fourleafstechnology.com/legal/dpa, is incorporated by reference and applies to Provider's processing of personal data on Customer's behalf through the Application.

5. Privacy Policy

Provider's Privacy Policy, available at fourleafstechnology.com/legal/privacy, describes what data the Application collects, why, and who it is shared with, and is incorporated by reference.

6. AI-assisted processing disclosure

The Application uses AI hosted by Atlassian (the Forge LLMs service, running Anthropic's Claude model within Atlassian's cloud) to pre-classify review items as "likely safe" or "needs review." Only the following attributes of a review item are sent for this purpose: group names, role names, days-since-last-active, and computed risk-flag labels. The subject's name, email address, and Jira account ID are never sent. AI classification is advisory only — every decision is made and recorded by a human reviewer, and the AI's suggested tag is never treated as the decision itself.

7. Support

Provider offers support via [email protected], with a target first response within 2 business days.

8. Subscription and billing

Subscriptions, trial terms, and billing are handled entirely by Atlassian per the Marketplace's own billing terms; Provider does not separately invoice Customers.

Back to Certia